Configure list of force-installed Isolated Web Apps
Last updated October 31, 2024
Setting the policy specifies a list of isolated web apps (IWAs) that install silently.
IWAs are applications that have useful security properties unavailable to normal web pages. They are packaged in a Signed Web Bundle. The public key of the Signed Web Bundle is used to create the Web Bundle ID that identifies the IWA.
So far this policy works for Managed Guest Session only.
Each list item of the policy is an object which has two mandatory fields: the update manifest URL and Web Bundle ID of the Isolated Web App.
Each item can also have optional fields: an IWA release/update channel name (update_channel) and a specific version to pin (pinned_version).
If the "update_channel" is not set, then the value of "default" will be used. When the pinned_version is specified, the system will attempt to install that specific version (if available on the current update channel).
By default, version pinning does not allow going back to older versions. Pinning an IWA to a specific version prevents it from being updated beyond that version. To unpin, remove this field.